[Mimedefang] Dropping Attachment from one User (thank you for any and all help)

[Aaron Enders]

mimedefang version 2.67
SpamAssassin version 3.3.1
   running on Perl version 5.10.1

Issue: From external user mimedefang dropping the attachment. I can't 
put a reason to this. I am hoping someone can help out. The source is 
sending email as html(from outlook) with an inline jpg in their 
signature. The attachment is supposed to be a PDF. Below is mail.log 
extract and two email source, one worked one didn't..  Thank you for any 
and all help!

mail.log---

Jun  2 15:47:25 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=helo, continue
Jun  2 15:47:25 smtp1 sm-mta[10145]: p52JlOhf010145: Milter: sender: 
<lmisoulis at skylinewindows.com>
Jun  2 15:47:25 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=mail, continue
Jun  2 15:47:25 smtp1 sm-mta[10145]: p52JlOhf010145: milter=clamav, 
action=mail, continue
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: Milter: rcpts: 
<user1.internal.com>
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=rcpt, continue
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: milter=clamav, 
action=rcpt, continue
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: Milter: rcpts: 
<user2 at internal.com>
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=rcpt, continue
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: milter=clamav, 
action=rcpt, continue
Jun  2 15:47:27 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=data, continue
Jun  2 15:47:28 smtp1 sm-mta[10145]: p52JlOhf010145: 
from=<remoteuser at external.com>, size=91204, class=0, nrcpts=2, 
msgid=<BF64471249F5DF46BF5AB6AA70F91AED01EBB246CA at mail.external.local>, 
proto=ESMTP, daemon=MTA-v4, relay=mail.external.com [65.51.68.229]
Jun  2 15:47:28 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=header, continue
Jun  2 15:47:28 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=eoh, continue
Jun  2 15:47:28 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=body, continue
Jun  2 15:47:28 smtp1 sm-mta[10145]: p52JlOhf010145: milter=mimedefang, 
action=body, continue
Jun  2 15:47:58 smtp1 mimedefang.pl[29889]: filter: p52JlOhf010145:  drop=1
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter change 
(add): header: X-Spam-Score: -101.91 () 
BAYES_00,T_RP_MATCHES_RCVD,USER_IN_WHITELIST
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter change: 
header Content-Type: from  
multipart/mixed;\n\tboundary="_000_BF64471249F5DF46BF5AB6AA70F91AED01EBB246CAmailexternal_" 
to text/plain; charset="us-ascii"
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter change: 
header MIME-Version: from  1.0 to 1.0
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter change 
(add): header: Content-Disposition: inline
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter change 
(add): header: Content-Transfer-Encoding: quoted-printable
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter message: 
body replaced
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter add: header: 
X-Scanned-By: MIMEDefang 2.67 on 192.168.100.42
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: milter=clamav, 
action=header, continue
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: milter=clamav, 
action=body, continue
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter add: header: 
X-Virus-Scanned: clamav-milter 0.96.5 at smtp1
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter add: header: 
X-Virus-Status: Clean
Jun  2 15:47:58 smtp1 sm-mta[10145]: p52JlOhf010145: Milter accept: message


Source of email with Dropped Attachment..

Thread-Index: AcwhXSZWYoHkDSEzRIWIrTCSShs/8Q==
Message-ID:<BF64471249F5DF46BF5AB6AA70F91AED01EBB246C6 at mail.external.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:<BF64471249F5DF46BF5AB6AA70F91AED01EBB246C6 at mail.external.local>
acceptlanguage: en-US
x-tm-as-product-ver: SMEX-10.0.0.1412-6.500.1024-18174.003
x-tm-as-result: No--44.880500-5.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Scanned-By: MIMEDefang 2.67 on 192.168.100.42
X-Virus-Scanned: clamav-milter 0.96.5 at smtp1
X-Virus-Status: Clean

Source of Email that worked..

Thread-Topic: Test
Thread-Index: Acwh9FoaSjvBBlprTiGqbIb1rkvvpQ==
Message-ID:<BF64471249F5DF46BF5AB6AA70F91AED01EE93D201 at mail.external.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
x-tm-as-product-ver: SMEX-10.0.0.1412-6.500.1024-18176.003
x-tm-as-result: No--46.721700-5.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
Content-Type: multipart/mixed;
	boundary="_006_BF64471249F5DF46BF5AB6AA70F91AED01EE93D201mailexternal_"
MIME-Version: 1.0
X-Spam-Score: -101.908 () BAYES_00,HTML_IMAGE_RATIO_08,HTML_MESSAGE,T_RP_MATCHES_RCVD,USER_IN_WHITELIST
X-Scanned-By: MIMEDefang 2.67 on 192.168.100.42
X-Virus-Scanned: clamav-milter 0.96.5 at smtp1
X-Virus-Status: Clean